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(57) ABSTRACT 

A communications satellite (201) has an on-board high 
speed packet switch for switching transmitted data packets. 
The packet switch (502) is part of a processor subsystem 
(501) which also includes a number of demodulators (S03 x 
to 503 n ) demodulating signals received from an uplink 
downconverter. All of the processors in the processor sub- 
system (501) are organized into a loosely coupled, 
distributed, architecture of general purpose computer mod- 
ules (601) and digital signal processor modules (602) having 
both primary and redundant processors and being connected 
to each other by dual redundant PCI buses. Software and 
firmware is layered and distributed redundantly over the 
processor modules (601, 602). 

16 Claims, 8 Drawing Sheets 
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PACKET SWITCH CONTROL WITH 
LAYERED SOFTWARE 

CROSS REFERENCE TO RELATED 
APPLICATION 

Reference is made to related application entitled "Redun- 
dant Packet Switch Controller", filed on even date herewith 
Ser. No. 09/257,359, which application is incorporated 
herein by reference. 

BACKGROUND OF THE INVENTION 

1. Field of the Invention 

This invention relates generally to data communications 
systems and methods. In particular, the present invention 
relates to a packet data switch controller suitable for imple- 
mentation in a communications satellite. 

2. Description of Related Art 

Switched packet data communications systems and meth- 
ods are well known in the art. Perhaps the most prevalent 
examples of switched packet data communications systems 
are those utilizing the Asynchronous Transfer Mode (ATM) 
network protocol developed to efficiently move information 
at a faster rate. The networks of switched packet data 
communications systems include a number of packet 
switches of otherwise minimum functionality which move 
user information encapsulated into packets (sometimes 
referred to as cells) from an input port to an output port. In 
addition to the user (or payload) data, these packets have a 
header containing information to be used inside the network 
for routing, error correction, flow control, etc. For example, 
the packets in an ATM network are defined as having 53 
bytes composed of a 5 byte header and 48 byte payload 
information. 

r lhe general architecture of a conventional packet switch 
100 in such a network is shown in FIG. 1. It consists of a 
number of input interface modules 101 ± to 101„, a switching 
module 102, a number of output interface modules 103! to 
103„, and a switch manager 104. Each input interface 
module 10^ to 101„ includes a physical interface to an optic 
fiber or a cable, such as a coaxial cable commonly used in 
CATV systems, of the network. Each input interface module 
lOlj to 101 M performs validation and translation of virtual 
channel identifier (VCI) and virtual path identifier (VPI), a 
header error control (HEC) check, statistics collection, con- 
forming traffic validation, and general traffic shaping and 
policing. Switching module 102 routes the packets from 
each input interface module 101 a to 101 M to the correct 
output port, replicates multicast packets, discards packets 
depending on traffic congestion, and performs priority queu- 
ing of packets. Each input interface module 103-l to 103 n 
also includes a physical interface to an optic fiber or a cable, 
such as a coaxial cable commonly used in CATV systems, of 
the network and also performs statistics collection. Switch 
manager 104 performs network management and connection 
management. 

Although not shown in FIG. 1, conventional packet 
switch 100 may utilize a number of general purpose pro- 
cessors. These processors are usually tightly coupled in a 
specific configuration, with a connection path between the 
general purpose processors fixed by hardware, and having 
one operating system performing unified management for 
the configuration of processors. However, the general pur- 
pose processors may be loosely coupled to one another and 
operated by a distributed real-time operating system in 
conjunction with embedded firmware. In such a loosely 
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coupled system, if one processor fails, the system must be 
rebooted in order to have the failed processor replaced with 
another processor. The necessity of rebooting the system in 
order to implement fault correction is a major disadvantage 

5 in a communications satellite responsible for providing 
switching for a large amount of data packets. 

Packet switch 100 is usually provided as a discrete 
element in a terrestial based network. As such, there is 
usually easy access to the packet switch in the event of a 

10 fault or malfunction, and in order to perform maintenance, 
diagnostic tests, or software update installations. Packet 
switch 100 is thus generally unacceptable for installation in 
extremely remote locations and the network thus has geo- 
graphical limitations, such as those imposed by large bodies 

15 of water and by space. 

Remote locations also present other obstacles. For 
example, in a space-based communications satellite, it is 
customary to provide a control processor to manage the 
overall operation of the processing suite and to provide a 

20 central point of interaction for reception of, reaction to, and 
implementation of control directives from the ground, col- 
lection and gathering of statistics, formatting and sending of 
reports on processing activity, etc. Since packet switch 100 
is a discrete element in a terrestial communications system, 

25 it is usually designed independently without taking into 
consideration the other elements of the network in which it 
is installed and is unsuitable for use in a communications 
satellite. For example, during a long period of operation in 
orbit, several processors and other elements of a communi- 

30 cations satellite may fail. Although embedded firmware in 
conjunction with real-time distributed operating system pro- 
vides a limited amount of software adaptability in those 
systems with loosely coupled processors as described above, 
there is a need for a multiprocessor operating and applica- 

35 tion software structure for a packet switch in a communi- 
cations satellite that efficiently meets the operational perfor- 
mance requirements of the and provides a framework for 
more operational robustness, fault tolerance and reliability. 

40 BRIEF SUMMARY OF THE PREFERRED 

EMBODIMENTS 

It is an object of the following preferred embodiments of 
the invention to provide a global packet data communica- 

45 tions system. In particular, the preferred embodiments pref- 
erably include packet switches installed on board satellites 
located in a geosynchronous, medium earth, or low earth 
orbit in space. Hie satellites of these embodiments are 
preferably capable of operating in different communications 

50 applications. 

As part of the preferred embodiments, it is a particular 
object to provide a fast cell/packet switch having a general 
software architecture particularly well suited for the above 
objects. The software architecture of the fast cell/packet 

55 switch is preferably flexible so as to be able to satisfy the 
communications desires of different users. In particular, the 
switch must be able to operate at speeds higher than con- 
ventional packet switches and must be able to implement 
fault correction without the need for rebooting. 

60 A real- time control processor is used in the communica- 
tions satellite of the preferred embodiments. In addition to 
managing the overall operation of the processing subsystem, 
it also provides a packet switch controller performing switch 
configuration and management, and dissemination func- 

65 tions. This real-time control processor, including the packet 
switch controller, must efficiently achieve the throughput 
required of the switch control function. 
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Throughput efficiency is achieved through optimization DETAILED DESCRIPTION OF THE 

of the distribution of layered software control functions and PREFERRED EMBODIMENTS 

application software to each one of multiple general pro- Before describing in detail the preferred embodiments of 

cessors (GPs) and digital signal processors (DSPs). In a redundant packet switch controUer in accordance with the 

particular, there is layering of: (a) firmware optimized for 5 prese nt invention, it should be observed that the invention 

specific hardware control or I/O data movement functions; involves a novel combination of components, controls, 

(b) a real-time operating system for general purpose pro- functions and operations as well as structure. Accordingly, 

cessing; (c) software executives optimized for DSP and the block diagram illustrations of the figures representing the 

embedded I/O control functions; and (d) application soft- preferred embodiments may represent an exemplary struc- 

ware distributed and optimized to each DSP and GR This 1Q tural arrangement of the invention or may merely convey the 

feature allows the combination of GPs and DSPs for efficient functional and operational aspects of the invention in a 

distribution of software control functions. In the event of a man ner which makes them apparent to those skilled in the 

failure of any one processor, tasks can be redistributed or a art 

switch can be made to a different processor. FIG. 2 is an overview of an exemplary satellite commu- 

A preferred application of the present invention is m a ^ nications system 200 in which the preferred embodiments of 

wideband satellite communications system transmitting pay- the invention may be implemented. The system includes a 

load data over a number of different frequency channels at plurality of communications satellites in geosynchronous 

extremely high data rates. The communications satellite of orbit, of which communications satellites 201j and 201 2 are 

such a system has significant processing requirements, such shown. While the preferred embodiment is for use with a 

as demodulation and channelization of the wideband signal geosyncronous satellite, the invention is also useful with 

into narrowband channels, in addition to the packet switch 20 satellites in low earth orbit (LEO) and medium earth orbit 

controller. The system may be a "secure" frequency-hopped (MEO). The communications satellites are linked to each 

communications system in which reception of the transmit- other and have bidirectional Ka wideband links, containing 

ted waveform by the communications satellite requires a number of relatively narrowband signalling channels, with 

dehopping and/or frequency hopping of the data transmitted respective network operation centers (NOCs) 202. The 

by the communications satellite, NOCs 202 are in turn connected, perhaps by a wired 

In addition to the foregoing summary, a better understand- connection of a suitable type, to a terrestial network having 

ing of the preferred embodiments will become apparent a satellite management center (SMC) managing the satellite 

from the following detailed description of the preferred communications system. 

embodiments when read in connection with the accompa- 3Q Each communications satellite 201 has a Ka wideband 

nying drawings. While the foregoing and following written transmission link, with a number of relatively narrowband 

and illustrated disclosure focuses on disclosing preferred data and signalling channels, for transmitting to and from 

embodiments of the invention, it should be clearly under- each one of a number of user end terminals (UETs). These 

stood that the same is by way of illustration and example terminals may be for a single user or they may be a gateway 

only and is not to be taken by way of limitation. In particular, 35 for information to or from a number of users such as with the 

several elements and features of the preferred embodiments public switched telephone network (PSTN), the internet or 

are not essential for implementation of the invention. The a video server. 

spirit and scope of the present invention is limited only by -j^ sw i tc hing subsystem of a communications satellite 

the terms of the claims in the patent issuing from this 201 in satellite communications system 200 is isolated and 

application and not by the preferred embodiments. 4Q shown j n fig. 3. NOC 202 may communicate with com- 

BRIEF DESCRIPTION OF THE DRAWINGS munications satellite 201 to manage the switch through a 

™„ j . | i . £ , , , , . separate interface to the communications satellite than the 

FIG. lis a block diagram of a packet switch used in prior TT i™ c . . t 4 

, . * ■ f* UETs, preferably through a different antenna and in a secure 

art terrestial based switched packet data communications j u * u* u Kr^^ *»n-» 

r mode such as a frequency hopping scheme. NOC 202 

* . , „. 45 implements a switch manager 301 for providing some 

FIG. 2 is an overview of an exemplary satellite commu- switcfa configuration and management directives, which may 

nications system in which the preferred embodiments of the be physically located m N0C 202 or in the SMQ or 

invention may be implemented. distributed in some manner therebetween. It should be noted 

FIG. 3 is a generalized diagram illustrating the switching mat switch manager 301 m satellite communications system 

subsystem in the exemplary satellite communications sys- 5Q 200 is different than switch ma nager 104 in conventional 

tem of FIG. 2. packet switch 100 

FIG. 4 is a schematic mapping of the communication links FIG 4 is a schematic mapping of the satellite switches 

in the exemplary satellite communications system of FIG. 2. and communication links in the exemplary satellite commu- 

FIG. 5 is a general block diagram of a preferred embodi- nications system of FIG. 2. It helps illustrate that, when 

ment of a processor subsystem in relation to the switch and 55 viewed in the aggregate, satellite communications system 

other functional subsystems of the communications satellite 200 provides a complete network enabling switched packet 

of FIG. 3. da ta communication between a large number of user termi- 

FIG. 6 is a more specific block diagram of a preferred nals. 

embodiment of the processor subsystem in the communica- While communications satellite 201 contains a significant 

tions satellite of FIG. 3. 60 number of elements, only the switch is shown in FIG. 3 

FIG. 7 is a diagram illustrating the loosely coupled, merely to emphasize the present invention. Certain functions 

distributed, architecture of multiple processors and dual must be performed to receive, switch and transmit data 

redundant buses in a preferred embodiment of the processor packets in communications satellite 201 which are, separa- 

subsystem in the communications satellite of FIG, 3. tion of the various uplink channels by frequency, the recov- 

FIG. 8 is an illustration of the layered software distributed 65 ery of estimates of the modulated data packets from the burst 

on the processors in the preferred embodiment shown in body and the passing of the estimates to error control 

FIG. 7. processing, and the performing of decoding. 
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The communications satellite 201 has three major func- 
tional sub-systems. The Ka wideband data transmitted on a 
satellite uplink is typically frequency division multiplexed 
(FDM) and further divided by time division multiplexing 
(TDM) into slots occupied by a transmission burst. These 5 
bursts utilize phase shift keying (usually either BPSK or 
QPSK) as the modulation method. The transmission bursts 
have a header that facilitates forming an initial estimate of 
the carrier phase and a body which carries information 
typically decoded by means of an error control code. The JQ 
first functional subsystem has a tuner and channelizers to 
divide the data of the transmission bursts into sub-bands 
which are typically 17 MHz, and a demodulator and decoder 
to perform demodulation and decoding of the data in each 
sub-band outputted by the channelizers using the initial 
estimate of the carrier phase formed from the transmission 15 
bursts. The data packets may be in the form of ATM cells 
which are well known in the art. When encoding utilizes 
ATM cells, it is necessary to recover the cells from the 
decoded data and to perform integrity checks upon them. 
This processing may include decoding a Reed-Solomon 20 
outer code. 

The data transmissions may be configured into any one of 
three modes. The details of these modes, and of the corre- 
spondingly preferred demodulator and decoder, are 
explained in further detail in the co-pending applications 25 
entitled "Buffering and Sequencing of Soft Decisions of 
Multiple Channels Into a Single Shared Biorthogonal 
Decoder", filed on Jan. 19, 1999 Sen No. 09/239,871 "Serial 
to Parallel Conversion of Data to Facilitate Sharing a Single 
Buffer Among Multiple Channels", filed on Jan. 19, 1999 30 
Ser. No. 09/239,872; and "Buffering and Sequencing of Data 
From Multiple Channels Through a Shared Decoder", filed 
on Jan. 19, 1999 Ser. No. 09/240,171, which applications are 
incorporated herein by reference in their entirety. 

The second functional sub-system performs cell level 35 
functions on the data received from the demodulator and 
decoder in the first sub-system and performs appropriate 
switching of the data packets. The second sub-system 
includes the switch shown in FIG. 3. It is the primary focus 
of this application and will be described in more detail 40 
below. The third major functional sub-system has downlink 
modulators for receiving the data packets from the switch 
and transmitting them to the user end terminals. It is 
preferably able to accommodate a number of different 
transmission modes, including a downlink hopping beam 45 
scheme. 

While there are three major functional sub-systems in 
communications satellite 201, these functional sub-systems 
may not be distinct in their physical implementation. For 
example, the demodulator and decoder of the first functional 50 
up-link sub-system may utilize control signals, timing 
signals, and code signals from, and be under the general 
control of, an onboard satellite processor. FIG. 5 is a general 
block diagram of the physical implementation of a processor 
subsystem 501 in a preferred embodiment of communica- 55 
tions satellite 201. Processor subsystem 501 includes a 
resource controller 504 which controls demodulator and 
decoders 503 j to 503„ as well as fast packet/cell switch 502. 
As explained above, the demodulator and decoders 503 2 to 
503„ receive the signals from the downconverter of, and are 60 
themselves part of, the first functional up-link subsystem. 
Nevertheless, due in part to the amount of data processing 
performed therein, they are controlled by resource controller 
504 together with fast packet/cell switch 502 in processor 
subsystem 501. The data output from processor subsystem 65 
501 is provided to the modulators of the third downlink 
functional subsystem. 



,925 Bl 

6 

FIG. 6 is a more detailed block diagram of processor 
subsystem 501. Resource controller 504 has primary and 
redundant general purpose (GP) computer modules 601, 
primary and redundant non-volatile (NV) system memories 
602, and a number of digital signal processor (DSP) con- 
troller modules 603. The non-volatile memories 602 have a 
1553 interface to the remainder of communications satellite 
201 and an autonomous software upload capability. The 
signals from NOC 202 may be forwarded to GP computer 
modules 601 through this 1553 interface, or through the 
ATM data paths through a secure uplink channel. 

There are two types of redundant memories. Each GP 
computer module 601 has its own memory space associated 
with it. If a processor is redundant, then the memory that's 
associated with it is also redundant. The non-volatile 
memory 602 used for storing the static images and configu- 
ration information has its own redundant set of memories. It 
is connected to the spacecraft bus to connect to the 
telemetry, health and status information, software images, 
etc., uploaded and sent to the processor subsystem. A smart 
I/O processor contained in the resource controller handles 
transfer of data in and out of the memory, and locking of 
memory segments, a region that the type of operation needs 
to be performed with any communication data that should be 
run into the specific processor. If it's actually a new image 
that's being uploaded, then it needs to know that it's in a 
volatile memory and then signal the processor that the new 
memory image has been loaded. 

Each GP computer module 601 preferably includes a 
32-bit computer capable of performing 40 to 100 million 
instructions per second (MIPS). Depending on the process- 
ing and throughput requirements of the fast packet/cell 
switch 502, any suitable general purpose processor, such as 
a Power PC or RH32, may be used. A maintenance 
processor, which can be a relatively less powerful 16 -bit 
processor, is also included in each general purpose computer 
module 601. 

The GP computer modules 601 are connected to demodu- 
lator DSP controller modules 604 of demodulators SOSj to 
503„ through a serial interface such as 1773A. Each 
demodulator controller module 604 is preferably imple- 
mented using 21020 digital signal processors by TEMIC. A 
dual redundant PBI interface connects demodulator control- 
ler modules 604 to demodulator boards 605. The number of 
demodulator boards 605 is preferably equal to the number of 
IF inputs received by demodulators 503 x to 503„. 

The.GP computer modules 601 are connected to DSP 
controller modules 603 through a dual redundant PCI inter- 
face. Each DSP controller module 603 is connected to a 
number of modules in switch 502 through a dual redundant 
PCI bus discussed in more detail below with respect to FIG. 
7. 

In switch 502 of processor subsystem 501, inbound mod- 
ules 606 receive the outputs of demodulators 503 1 to 503„. 
The output of inbound modules 606 is provided to primary 
and redundant switch fabrics 607. Outbound modules 608 
receive an output of switch fabrics 607 and provide digital 
outputs to be sent by the downlink subsystem. Multicast 
modules 609 receive an output of switch fabrics 607 and 
provide an input to switch fabrics 607 in order to carry out 
multicasting by port duplication. 

One important feature of the processor subsystem in the 
preferred embodiments is the redundancy that is built into 
many of the modules and further provided in the form of 
dual redundant buses. The various modules of processor 
subsystem 501 described above can be interconnected over 
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duplicates of the same bus. If one of the buses, or one of the 
components that connects to a bus fails, a switch can be 
made over to the redundant bus or redundant component. 
The buses are truly physically redundant so that, in the back 
plane of the module according to the preferred 
embodiments, there are two separate sets of physical trace 
lines and separate pin outs for each bus. 

For example, in GP computer modules 601, an I/O 
interface is modified to provide cross copying where the 
single input and output from the GP processor chipset can be 
provided to either one of two redundant PCI buses. Both of 
the processor on the primary GP computer module 601 or 
the processor on the redundant GP computer module 601 can 
use either bus. If the GP computer module fails to switch the 
redundant processor to PCI bus A or if bus A itself fails, then 
the redundant processor can be connected to PCI bus B. 

The proper selection of PCI bus A or PCI bus B depends 
on the failure mode of the processor subsystem 501 at the 
time. The failure mode is tracked by registers at multiple 
places in processor subsystem 501. For example, if a bus is 
always timing out and not getting its I/O communication 
handled properly, it can inform the software that's running 
on those processors connected to and using the bus. Depend- 
ing on the type and location of the failure, processor 
subsystem 501 will go to a higher level of decision making 
to select the failure mode. The failure can go all the way to 
ground if, for example, an entire GP computer module 601 
or DSP controller module 603 is inoperable, in which case 
the module will simply be powered off and routing of data 
to and from the inoperable module converted so that it does 
not utilize that module. The software is able to detect the 
failure modes sequentially in descending order to determine 
the lowest replaceable unit such as a specific general 
processor, digital signal processor, or bus. 

These failure modes utilize a number of registers in the 
16-bit maintenance processor of the GP computer module 
601. The maintenance processor continuously updates its 
registers so the software knows whether or not there is any 
fault. There are also fault registers for each one of the PCI 
buses which log whether or not there have been any failures 
on the bus, A fault management tab will periodically look at 
the status of these registers and record any failure informa- 
tion. 

A higher level of decision making process can occur in 
multiple levels of the design. When a failure is detected in 
a processor, an attempt is made to reach the failure or fix it 
in software. If the failure keeps occurring in a processor, the 
decision making process to switch out the processor is done 
elsewhere. If a certain amount of information logged, it can 
be sent to NOC 202 and to other units of the communica- 
tions satellite 201 so that a suitable determination can be 
made in light of the network management. While this 
process doesn't have to be performed in any particular 
manner, a key feature of the preferred embodiments is that 
it isn't made autonomously. 

FIG. 7 more clearly shows a preferred organization of 
general processors (GP), digital signal processors (DSP), 
and application specific hardware (ASH) in a loosely 
coupled distributed processing architecture using dual 
redundant industry standard PCI buses. At the top of the 
hierarchy is the GP computer module that performs unstruc- 
tured high level control and coordination functions among 
DSPs and interacts with the spacecraft control processor. 
Depending on physical proximity, the GP set communicates 
with remote DSPs via dual-redundant 1773 standard serial 
buses and physically colocated DSPs via dual-redundant 
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parallel PCI buses. In turn, the DSPs connect with ASH 
using dual redundant PCI buses as well. 

Although not shown, the ASH elements are themselves 
interconnected in their own specialized internal scheme to 

5 provide functionality and redundancy spares management. 
All of the processors execute their specialized tasks while 
interacting with each other as enabled by a loosely coupled 
multi-processing structure. Some of the processors are pow- 
ered on and ready to assume processing responsibilities on 

10 short order. Other processors are turned off to save power, 
but are ready to be configured as may be required to replace 
a failed processor. 

The preferred embodiment using this architecture pro- 
vides the communications satellite 201 with the advanta- 

15 geous ability to resist faults, reconfigure to correct or com- 
pensate for the faults and resume normal operation 
following the failure of any processor. The application 
processor code is built on top of a layered distributed 
operating system such that the function can be run on any 

20 processor connected to the ASH. Upon detection of a failure, 
the failed processor's task assignment and related database 
is transferred to a new processor connected by dual- 
redundant buses whereupon it continues the failed proces- 
sor's task. Dual redundant busing increases the reliability of 

25 the system by ensuring that a path will exist among the 
processors and the ASH. 

Although not shown, each dual DSP signal processor 701 
is actually dual redundant. There are two buses as well as 

30 two signal processors. Depending on the location of the 
failure, for example if the failure is in primary DSP proces- 
sor 701, it can be switched to the redundant signal processor. 
If both signal processors fail, the system can be operated by 
another one of the dual DSP signal processors 701 which can 

35 take over the task. The elements are grouped together in a 
number of clusters, each of the clusters having respective 
redundant cluster buses. If one of the clusters, signal 
processors, or both, fail, there's no more redundancy within 
that cluster. In such a case, one of the signal processors from 

4Q another cluster can take over the task of the failed signal 
processor. The plurality of clusters allow switchover 
between different processors without affecting the main dual 
redundant bus in resource controller 504. 

In normal operation, there's always only a limited amount 

45 of resources on communications satellite 201 to process a 
pay load. The system software that's loaded onto it will be 
configured to operate in the hardware configuration that's 
running at the time. If there is a catastrophic failure where 
two DSP processors and/or a cluster are lost so that you have 

50 to reassign the task, a new code image is uploaded to the 
processor subsystem 501 by NOC 202 to provide an instruc- 
tion to use a particular DSP processor. The resource con- 
troller 504 performs a reassignment of resources in order to 
control a further range of hardware. However, such a reas- 

55 signment of hardware, whether permanent or temporary, is 
low in the order of failure modes. Most failures are a 
temporary inability by a component or bus to respond 
caused by an overload of data. 

The specifications for the PCI Local Bus, Revision 2.1, 

60 has a number of configurable items. The preferred embodi- 
ment defines some of those configurable items for fault 
status. Additional status registers are included for each one 
of the dual redundant PCI buses that will log certain infor- 
mation transferred on the bus. These extensions include, for 

65 example, parity for the PCI bus and additional hand out 
information for indicating whether or not there is confirma- 
tion of receipt of data. Inside each of the GP and DSP signal 
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processors, memory and the switch modules connected to a 
PCI bus is an integrated chip that can become a master in the 
system so there's a controllable connection to the PCI bus 
within each of those blocks. There's at least one state in each 
of those blocks in which that particular block is connected 
to the PCI bus and can be a master of the bus. Consequently, 
while there are multiple possible masters and slaves, there is 
in any instance one chip responsible for arbitrating the 
information to and from each of the processors that transfer 
data to each other over the bus. 

Elements of a distributed loosely coupled multiprocessing 
real-time operating system, executive, or kernel are hosted 
on each processor 701 to support execution of application 
software that's redundant of the software and/or firmware on 
the other signal processors 701. This operating environment 
enables the seamless communication among processors as if 
they were operating out of the same memory and I/O space. 
Even if one of the processors or clusters is totally lost, the 
ground would have to reconsider the system and upload 
information into one of GP computer modules 601, which 
would then allow those tasks to run on one of the remaining 
processors in the cluster or one of the remaining three 
clusters. 

FIG. 8 is an illustration of the layered software and 
firmware distributed on the processors in the preferred 
embodiment shown in FIG. 7. At the bottom physical layer, 
a PCI backplane 800 provides a high-rate communication 
channel. The GP computer 601 is connected to PCI back- 
plane 800 as are the various DSPs. Although there are 
numerous DSPs in the preferred redundant architecture, only 
two types of the connections between the DSPs are included 
in FIG. 8, 800 and 803. There is also a built-in self test 
(BIST) and fault manager 802 implemented. The autono- 
mous bootup and initialization is managed by 32-bit GP 
computer 601. The first 16-bit I/O controller 801 a has a 
relatively low-rate 1553 interface to, for example, non- 
volatile memory 602. The second 16-bit I/O controller 801 2 
has a relatively low-rate 1773 interface to, for example, the 
demodulators. 

Running on top of the hardware elements are the real-time 
operating system (RTOS) on the GP computer modules 601, 
an executive on the DSPs 801 3 , and a small kernel on the 
16-bit I/O controllers. A global communication software 
layer turns local I/O and memory space into one unified 
construct readily accessible to all processors. It also incor- 
porates required interprocess communication and synchro- 
nization enabling processes running on multiple processors 
to appear to be running on a single processor. This archi- 
tecture in turn enables application software to be written as 
if running on a uni-processor while in reality being hosted on 
heterogeneous multi-processors. The benefit of this 
approach is that performance optimization is guaranteed by 
the operating environment and the applications software 
focuses primarily on functionality and only secondarily on 
performance. 

Task partitioning is performed at initialization, while 
repartitioning occurs when a processor is taken off line and 
a spare processor takes over its tasks. The assignment of 
tasks is carried out by the loosely configured, distributed 
architecture and layered software. It's not done autono- 
mously in any one specific processor. Therefore, in addition 
to optimizing performance, this layered approach also sup- 
ports fault tolerance and eases the pain of reconfiguration 
when a failed processor needs to be replaced in flight. 

A specific path to each DSP is independent from the other 
ones that makes it a more distributed system as opposed to 
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both of them working on the exact same task at the exact 
same time. The software will petition the amount of work 
that is done on each computer. That makes it distributed so 
that they don't have to communicate tightly between them in 
looped up type mode, for example. 

The DSPs have conventional real-time OS interrupts and 
loop timers to detect whether processing is caught in a loop. 
There are different applications associated with each timer. 
For example, on a DSP handling task switching, if a task gets 
stuck and doesn't switch off properly, it can generate a 
time-out and interrupt to indicate the presence of an error in 
the system, communication passes between different pro- 
cessors and is used to signal an event. The events are all 
generic in the sense that they interrupt the processors and 
timers that time out. The tightly or more closely coupled 
processors can have a higher bandwidth and communication 
to the processors in terms of how the task is distributed. 
They can be set up so that they communicate more often and 
can be reallocated if they need to communicate more often. 
Since they're loosely coupled, they become more indepen- 
dent. They can operate separately and still communicate as 
much information. 

Other features of the invention may be apparent to those 
skilled in the art from the detailed description of the example 
embodiments and claims when read in connection with the 
accompanying drawings. While the foregoing and following 
written and illustrated disclosure focuses on disclosing 
example embodiments of the invention, it should be under- 
stood that the same is by way of illustration and example 
only, is not to be taken by way of limitation and may be 
modified in learned practice of the invention. While the 
foregoing has described what are considered to be example 
embodiments of the invention, it is understood that various 
modifications may be made therein and that the invention 
may be implemented in various forms and embodiments, 
and that it may be applied in numerous applications, only 
some of which have been described herein. It is intended by 
the following claims to claim all such modifications and 
variations. 

What is claimed is: 

1. A communications satellite comprising: 

an up-link sub-system having a downconverter receiving 
a wideband signal transmission containing information 
organized into data packets and a demodulator and 
decoder demodulating the wideband signal transmis- 
sion and decoding the information to obtain the data 
packets; 

a processor subsystem having a high speed switch receiv- 
ing a plurality of data packets from the up-link 
subsystem, switching the data packets, and providing 
the data packets at output ports thereof, the processor 
subsystem comprising a plurality of coupled indepen- 
dent processors; 

software and firmware layered and distributed over the 
plurality of independent processors; and 

a down-link subsystem receiving the data packets output 
by the packet switch of the processor subsystem and 
modulating the data packets in a down link 
transmission, 

wherein the plurality of coupled independent processors 
operate under control of said layered software and 
firmware. 

2. The communications satellite recited in claim 1, 
wherein said plurality of independent processors comprises 
both general processors and digital signal processors. 

3. The communications satellite recited in claim 2, 
wherein a resource controller provides switch management 
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for said high speed packet switch and controls said plurality a resource controller controlling each of said inbound 

of independent processors. modules, switch fabric and outbound modules, 

4. The communications satellite recited in claim 1, wherein said inbound modules, switch fabric and out- 
wherein the bottom layer of said layered software and bound modules, and resources controller operate under 
firmware comprises firmware optimized for specific hard- 5 of ^ layefed software and firmwar e. 

ware control or data movement. 10. The high speed packet data switch recited in claim 9, 

5. The communications satellite recited in claim 4, wherein ^ plurality of independent proceS sors comprises 
wherein the layer immediately above said firmware opti- u . . r ' , . , . t 

mized for specific hardware "control or data movement bo * 8 e " eraI Pressors and dtgital stgnal processors, 

comprises a real-time operating system for general purpose 10 U U - . .commun.cat.ons satelbte reeled in claim 10, 

. wherein said resource controller provides switch manage - 

Pr0 6 Ce The S *communications satellite recited in claim 5, ment for said hi S h s P eed P acket switch and controls said 

wherein the layer immediately above said real-time operat- plurality of independent processors, 

ing system for general purpose processing comprises soft- 12. The communications satellite recited in claim 9, 

ware executives optimized for said digital signal processors 15 wherein the bottom layer of said layered software and 

and embedded I/O control functions. firmware comprises firmware optimized for specific hard- 

7. The communications satellite recited in claim 6, ware control or data movement. 

wherein the layer immediately above said software execu- 13. The communications satellite recited in claim 12, 

tives optimized for said digital signal processors and embed- wherein the layer immediately above said firmware opti- 

ded I/O control functions comprises application software 20 mized for specific hardware control or data movement 

distributed and optimized to each digital signal processor comprises a real-time operating system for general purpose 

and general processor. processing. 

8. The communications satellite recited in claim 7, 14 ^ communications satellite recited in claim 13, 
wherein said application software comprises a fault man- wherein the layer immediately above said real-time operat- 
agement program which detects faults in said plurality of 25 mg system for general purpose processing comprises soft- 
independent processors. ware execut j ves optimized for said digital signal processors 

9. A high speed packet switch comprising: and embedded yo control functions. 

a plurality of inbound modules; 15 ^ communications satellite recited in claim 14, 

a switch fabric receiving data packets from said plurality wherein the layer immediately above said software execu- 

of inbound modules at a plurality of input ports thereof tives optimized for said digital signal processors and embed- 

and switching said data packets to be controllably <jed t/q control functions comprises application software 

output from output ports thereof; distributed and optimized to each digital signal processor 

a plurality of outbound modules, said plurality of out- and general processor, 

bound modules receiving said data packets from said 35 16. The communications satellite recited in claim 15, 

output ports of said switch fabric; wherein said application software comprises a fault man- 

software and firmware layered and distributed over a agement program which detects faults in said plurality of 
plurality of coupled, independent processors imple- loosely coupled independent processors, 
menting said inbound modules, switch fabric and out- 
bound modules; and ***** 
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